Skill UI

Guides investigators through preserving evidence and analyzing logs, snapshots, and metadata across AWS, Azure, and GCP, covering breach response, IAM analysis, and incident triage in cloud environments.

Orchestrates cloud-native incident containment across AWS, Azure, and GCP by isolating compromised compute and storage, revoking credentials, preserving evidence, and enforcing strict network controls to stop lateral movement.

Provides a workflow for authorized penetration testing across AWS, Azure, and GCP to discover IAM, storage, serverless, and compute weaknesses, leveraging Pacu, ScoutSuite, Prowler, and cloud-native tools.

Guides security teams through auditing AWS Lambda, Azure Functions, and GCP Cloud Functions to detect excessive execution permissions, exposed secrets, insecure runtime settings, and missing runtime protections before deployment or compliance checks.

Guides security teams through enabling Microsoft Defender for Cloud plans, configuring multi-cloud connectors, analyzing Secure Score recommendations, and automating security controls in Azure to protect workloads across servers, containers, storage, and databases.

Guides teams to harden AWS Lambda, Azure Functions, and GCP Cloud Functions by enforcing least-privileged IAM roles, eliminating hardcoded secrets, scanning dependencies, validating inputs, and enabling monitoring so serverless workloads resist injection, credential theft, and supply-chain threats.

Design scalable Azure architectures for startups and enterprises, generate Bicep IaC templates, analyze costs, and configure Azure DevOps or GitHub Actions pipelines for deployments.